Tetsuo Handa
2010-10-10 10:19:52 UTC
$B!!(BAKARI $B!J(B http://akari.sourceforge.jp/ $B!K$O(B Linux 2.6 $B%+!<%M%k8~$1$N%"%/%;%9(B
$***@O!?@)8B%b%8%e!<%k$G$9!#8=:_3+H/Cf$N(B TOMOYO 1.8 $B$r%Y!<%9$K!"=c?h$K%m!<%@%V%k(B
$B%+!<%M%k%b%8%e!<%k!J#L#K#M!K$H$7$FDI2C2DG=$J#L#S#M%b%8%e!<%k$K2~B$$7$^$7$?!#(B
$B!!(BTOMOYO 1.7.2 $B$GBP1~$7$?$h$&$J%U%C%/$@$1$r%+!<%M%kK\BN$KKd$a9~$s$G;D$j$r#L#K#M(B
$B$H$7$***@Z$jN%$9$H$$$&J}K!$G$O$J$/!"%+!<%M%kK\BN$KBP$9$k=$@5$rA4$/I,MW$H$7$J$$(B
$BJ}K!$G<B8=$5$l$F$$$^$9!#$=$N$?$a!"#L#S#M$,%5%]!<%H$5$l$F$$$k%+!<%M%k$G$"$l$P!"(B
AKARI $B$r;H$&$3$H$,2DG=$G$9!#$D$^$j!">/$J$/$H$b(B
Red Hat Enterprise Linux (RHEL4(2.6.9)/RHEL5(2.6.18)/RHEL6(2.6.32))
Fedora (from Fedora Core 2(2.6.5) to Fedora 14(2.6.36))
Ubuntu (from Warty(2.6.8) to Maverick(2.6.35))
Debian (Sarge(2.6.8)/Etch(2.6.18)/Lenny(2.6.26)/Squeeze(2.6.32))
openSUSE (from 9.1(2.6.4) to 11.3(2.6.34))
$B$J$I$GMxMQ2DG=$G$9!#!J%+!<%M%k$,#L#S#M$r%5%]!<%H$7$F$$$J$$>l9g$O;H$($^$;$s!#(B
$B$^$?!"%G%#%9%H%j%S%e!<%?FH<+$N%Q%C%A$,E,MQ$5$l$F$$$k$3$H$K$h$j;H$($J$$>l9g$b(B
$B$"$k$3$H$r$4N;>5$/$@$5$$!#!K(B
$B!!(BAKARI $B$O#L#K#M$+$i%"%/%;%9$G$-$J$$4X?t$dJQ?t$K6/0z$K%"%/%;%9$9$k$?$a$K!"(B
$B%P%$%J%j%3!<%I$r%9%-%c%s$7$^$9!#$=$N$?$a!"F0:n$7$J$$#C#P#U%"!<%-%F%/%A%c$,(B
$B$"$k$+$H;W$$$^$9!#8=;~E@$G$O(B x86_32 $B$G$NF0:n$r3NG'$7$F$$$^$9$,!"(B x86_64 $B$d(B
IA64 $B$J$I$NB>$N4D6-$G$NF0:n$O3NG'$7$F$$$^$;$s!J$"$k$$$O3NG'$9$k$?$a$N4D6-$r(B
$B;}$C$F$$$^$;$s!K!#(B
$B!!$3$N$h$&$J<jK!$r:NMQ$9$k$K;j$C$?GX7J$K$D$$$F$O#87n$K%\%9%H%s$G3+:E$5$l$?(B
Linux Security Summit $B$N%i%$%H%K%s%0%H!<%/$G>R2p$7$^$7$?$,!";22C$7$F$$$J$$?M$O(B
$BA4A3CN$i$J$$$G$7$g$&$+$i$3$N%a!<%k$NKvHx$K=q$-$^$9!#(B
$B!!(BAKARI $B$O%+!<%M%kK\BN$KBP$9$k=$@5$rA4$/I,MW$H$7$J$$$?$a!"(B TOMOYO 1.8 $B$HHf$Y$F(B
$BF3F~$N$?$a$N?4M}E*>cJI$,Dc$/$J$C$F$$$^$9!#$^$?!"%M%C%H%o!<%/!JAw?.7OA`:n!K$N(B
$B@)8B$d%"%/%;%9%m%05!G=$J$I$b%5%]!<%H$5$l$F$*$j!"(B TOMOYO 2.3 $B$HHf$Y$F$h$jB?$/$N(B
$B5!G=$rMxMQ$9$k$3$H$,$G$-$^$9!#$=$7$F!"(B AKARI $B$O#L#S#M%b%8%e!<%k$G$O$"$j$^$9$,!"(B
TOMOYO 1.x $B$HF1MM$KB>$N#L#S#M%b%8%e!<%k$H$NJ;MQ$,2DG=$G$9!#(B AKARI $B$r;H$&$?$a$K(B
SELinux/Smack/TOMOYO/AppArmor $B$J$I$rL58z$K$9$kI,MW$O$"$j$^$;$s!#(B
$B!!%+!<%M%kK\BN$K<j$r2C$($J$$$G<B8=$G$-$kHO0O$G<BAu$7$F$$$k$?$a!"#L#S#M%U%C%/$,(B
$BDs6!$5$l$F$$$J$$$3$H$K$h$j(B AKARI $B$G$OMxMQ$G$-$J$$5!G=$b$"$j$^$9!#Nc$($P!"(B
$B%M%C%H%o!<%/!J<u?.7OA`:n!K$H%7%0%J%kAw?.$H%1%$%Q%S%j%F%#$KBP$9$k@)8B$K$O(B
$BBP1~$7$F$$$^$;$s!#$^$?!"%U%!%$%k$K4X$9$k%"%/%;%9@)8f$K$D$$$F$b%+!<%M%k$N(B
$B%P!<%8%g%s$*$h$S%+!<%M%k%3%s%U%#%0$K$h$j!"%A%'%C%/BP>]$H$J$k%Q!<%_%C%7%g%s$d(B
$B%Q%9L>$KBP$9$k:90[$,B8:_$7$F$$$^$9!#%"%/%;%***@O%D!<%k$H$7$F;H$&J,$K$O(B
$B5$$K$J$i$J$$$H;W$$$^$9$,!"%"%/%;%9@)8B%D!<%k$H$7$F;H$&$K$OIT==J,$JItJ,$,(B
$B$"$k$+$H;W$$$^$9!#(B
$B$3$N$h$&$J%b%8%e!<%k$r:n$k$3$H$K$J$C$?GX7J!'(B
$B!!:#G/$N#37n:"$@$C$?$H;W$$$^$9$,!"$"$k?M$+$i(B RHEL4/5 $B%f!<%68~$1$KC15!G=$J(B
$B!!%"%/%;%9@)8f%b%8%e!<%k$r:n$C$F$[$7$$$H$$$&AjCL$r<u$1$^$7$?!#$=$N:]!"(B
$B!!(BTOMOYO 1.x $B$N$h$&$K%+!<%M%kK\BN$rCV$-49$($kJ}K!$OMxMQ<T$K$H$C$F?4M}E*$J>cJI$,(B
$B!!9b$9$.$k$N$G!"#L#K#M$H$7$FDI2C2DG=$JJ}K!$G<B8=$7$F$[$7$$$HMj$^$l$^$7$?!#(B
$B!!#L#K#M$G$"$C$F$b(B RedHat $B$,%5%]!<%H$7$F$$$J$$#L#K#M$r%m!<%I$7$?;~E@$G(B RedHat
$B!!$K$h$k%5%]!<%H$r<u$1$i$l$J$/$J$k$N$G!"<B:]$K$O%+!<%M%kK\BN$rCV$-49$($k$N$H(B
$B!!Bg:9$J$$$H;d$O;W$&$N$G$9$,!"%(%s%I%f!<%6$O$=$&$O;W$o$J$$$h$&$G$9!#(B
$B!!$4B8$8$NDL$j!"%+!<%M%kK\BN$rCV$-49$($:$K%"%/%;%9@)8f%b%8%e!<%k$r;H$$$?$$>l9g(B
$B!!#L#S#M$r;H$&$7$+J}K!$,$"$j$^$;$s!#$7$+$7!"%+!<%M%k(B 2.6.24 $B$K$*$$$F!"(B
$B!!#L#S#M%b%8%e!<%k$rEPO?$9$k$?$a$N4X?t$G$"$k(B register_security() $B$*$h$S#L#S#M(B
$B!!%b%8%e!<%k$r8F$S=P$9$?$a$NJQ?t$G$"$k(B security_ops $B$K#L#K#M$+$i%"%/%;%9$9$k(B
$B!!$3$H$,$G$-$J$/$J$j$^$7$?!J(B http://lkml.org/lkml/2007/7/14/91 $B!K!#(B
$B!!%+!<%M%k(B 2.6.24 $B0J9_!"I=8~$-$K$O#L#S#M%b%8%e!<%k$r#L#K#M$H$7$F<BAu$9$k$3$H$O(B
$B!!IT2DG=$K$J$j$^$7$?$,!"H4$1F;$H$7$F(B /proc/kallsyms $B$+$i(B register_security() $B$N(B
$B!!%"%I%l%9$r3d$j=P$9$3$H$K$h$j#L#S#M%b%8%e!<%k$r#L#K#M$H$7$F<BAu$9$k$3$H$O(B
$B!!2DG=$G$7$?!#$7$+$7!"%+!<%M%k(B 2.6.35 $B$K$*$$$F(B register_security() $B<+?H$,(B
$B!!(Binitramfs/initrd $B$N3+;OA0$K>CLG$9$k$h$&$K$J$C$F$7$^$C$?$?$a!"$3$NH4$1F;$b(B
$B!!;H$($J$/$J$j$^$7$?!J(B http://lkml.org/lkml/2010/2/26/239 $B!K!#(B
$B!!$3$l$i$N;EMMJQ99$O(B RHEL4/5 $B8~$1$N%"%/%;%9@)8f%b%8%e!<%k$r:n$k>e$G$OLdBj$K$O(B
$B!!$J$j$^$;$s!#$7$+$7!"(B RHEL6 $B$d(B Ubuntu 10.10 $B8~$1$N%"%/%;%9@)8f%b%8%e!<%k$r(B
$B!!:n$k>e$G$OBgLdBj$G$9!#(B
$B!!$I$&$d$C$F$3$NLdBj$r2r7h$9$l$PNI$$$N$G$7$g$&!)C15!G=%"%/%;%9@)8f%b%8%e!<%k$r(B
$B!!#L#S#M%b%8%e!<%k$H$7$F<BAu$7$F%a%$%s%i%$%s$K%^!<%8$5$;!"$=$l$+$i(B
$B!!%G%#%9%H%j%S%e!<%?$K:NMQ$rF/$-$+$1$l$PNI$$$N$G$7$g$&$+!)(B
$B!!;DG0$J$,$i!"$3$NJ}K!$O$&$^$/$$$+$J$$$N$G$9!#(B
$B!!%+!<%M%k(B 2.6.36 $B$X8~$1$F(B Yama $B$H$$$&C15!G=#L#S#M%b%8%e!<%k$,Ds0F$5$l$^$7$?$,(B
$B!!%^!<%8$5$l$^$;$s$G$7$?!##L#S#M$OGSB>E*$G$"$k$f$(!"0lDL$j$N4pK\E*$J5!G=$r(B
$B!!%+%P!<$7$F$$$J$$#L#S#M%b%8%e!<%k$O%a%$%s%i%$%s$K$O:NMQ$7$J$$J}?K$@$+$i$G$9(B
$B!!!J(B http://lkml.org/lkml/2010/8/3/464 http://lkml.org/lkml/2010/8/5/147 $B!K!#(B
$B!!$D$^$j!"(B Yama $B$N$h$&$KC15!G=$J%"%/%;%9@)8f5!G=$rA_$-=8$a$?$@$1$N#L#S#M(B
$B!!%b%8%e!<%k$G$O:NMQ$5$l$J$$$N$G$9!J(B http://lkml.org/lkml/2010/8/2/188 $B!K!#(B
$B!!(Binitramfs/initrd $B3+;O8e$K#L#S#M%b%8%e!<%k$r%m!<%I$9$k$3$H$,$G$-$J$$$H$$$&(B
$B!!@)Ls$H!"C15!G=#L#S#M%b%8%e!<%k$O%a%$%s%i%$%s$K$O:NMQ$5$l$J$$$H$$$&@)Ls!"(B
$B!!%G%#%9%H%j%S%e!<%?$O%a%$%s%i%$%s$K:NMQ$5$l$F$$$J$$%3!<%I$r:NMQ$7$?$,$i$J$$(B
$B!!$H$$$&798~$,=E$J$C$?7k2L!"C15!G=#L#S#M%b%8%e!<%k$rF3F~$7$?$$%f!<%6$KBP$7$F(B
$B!!!V%+!<%M%k$r:F%3%s%Q%$%k$7$FCV$-49$($k$+!"$5$b$J$/$P$=$N%b%8%e!<%k$NF3F~$r(B
$B!!D|$a$k$+!W$NFs<TBr0l$rGw$i$6$k$r$($J$$$H$$$&>u67$,@8$8$F$$$k$o$1$G$9!#(B
$B!!!J(B Yama $B$ONc30$G!"(B Ubuntu 10.10 $B$N%+!<%M%k$K$OAH$_9~$^$l$F$$$^$9!#$7$+$b!"(B
$B!!(BUbuntu 10.10 $B$N%+!<%M%k$KAH$_9~$^$l$F$$$k(B Yama $B$O#L#S#M%U%C%/$G$O$J$/FH<+(B
$B!!%U%C%/$rMxMQ$7$F$$$k$?$a!"(B AppArmor $B$d(B TOMOYO $B$J$IB>$N#L#S#M%b%8%e!<%k$H(B
$B!!F1;~$K;HMQ$9$k$3$H$,$G$-$^$9!#!K(B
$B!!!V%a%$%s%i%$%s$KF~$C$F$$$J$$#L#S#M%b%8%e!<%k$K$O#L#S#M$r;H$o$;$J$$!W<BAu$K(B
$B!!$7$F$*$-$J$,$i!"!V%a%$%s%i%$%s$KF~$l$k$N$KCM$7$J$$#L#S#M%b%8%e!<%k$O%^!<%8(B
$B!!$7$J$$!W$H5,@)$7$F$$$k$o$1$G$9!#!V%a%$%s%i%$%s$KF~$C$F$$$k#L#K#M$rMxMQ$9$k(B
$B!!<jCJ$ODs6!$9$k$,!"%a%$%s%i%$%s$KF~$C$F$$$J$$#L#K#M$rMxMQ$9$k<jCJ$ODs6!(B
$B!!$7$J$$!W$H8@$C$F$$$k$N$KEy$7$$$N$G$9!#$3$l$G$O#L#K#M$d#L#S#M%b%8%e!<%k$r(B
$B!!3+H/!&MxMQ$9$k<+M3$rGmC%$7$F$7$^$&$3$H$K$J$j$^$9!#(B
$B!!%(%s%I%f!<%6$N<+***@UG$$G%a%$%s%i%$%s$KF~$C$F$$$J$$#L#K#M$d#L#S#M%b%8%e!<%k$r(B
$B!!MxMQ$9$k<+M3$OG'$a$i$l$k$Y$-$@$H;d$O;W$$$^$9!#$=$l8N!";d$O#L#K#M$+$i#L#S#M$K(B
$B!!6/0z$K%"%/%;%9$9$k<jK!$r3NN)$7!"#L#K#M%Y!<%9$N#L#S#M%b%8%e!<%k$H$7$F8x3+$7$?(B
$B!!$o$1$G$9!#:#$^$G2?=h$K$bL5$+$C$?$b$N$,!"$3$3$***@8$7$^$7$?!#(B
$B!!(BAKARI $B$N%=!<%9%3!<%I$r%F%s%W%l!<%H$H$7$F;H$&$3$H$K$h$jG$0U$NC15!G=#L#S#M(B
$B!!%b%8%e!<%k$r3+H/$9$k$3$H$,$G$-$k$O$:$G$9!#(B Linux Security Summit $B$G$O(B
$B!!(BTOMOYO 2.3 $B$rM-8z$K$7$?$^$^(B Yama $B$bM-8z$K$9$k$H$$$&%G%b$r8+$;$^$7$?(B
$B!!!J(B $B!K!#$^$?!"FCDj$N%f!<%6#I#D(B
$B!!$K$h$k%=%1%C%HA`:n$rA4$F<WCG$9$k$H$$$&#L#S#M%b%8%e!<%k$b$"$j$^$9(B
$B!!!J(B http://kerneltrap.org/mailarchive/linux-netdev/2010/8/26/6283942 $B!K!#(B
$***@O!?@)8B%b%8%e!<%k$G$9!#8=:_3+H/Cf$N(B TOMOYO 1.8 $B$r%Y!<%9$K!"=c?h$K%m!<%@%V%k(B
$B%+!<%M%k%b%8%e!<%k!J#L#K#M!K$H$7$FDI2C2DG=$J#L#S#M%b%8%e!<%k$K2~B$$7$^$7$?!#(B
$B!!(BTOMOYO 1.7.2 $B$GBP1~$7$?$h$&$J%U%C%/$@$1$r%+!<%M%kK\BN$KKd$a9~$s$G;D$j$r#L#K#M(B
$B$H$7$***@Z$jN%$9$H$$$&J}K!$G$O$J$/!"%+!<%M%kK\BN$KBP$9$k=$@5$rA4$/I,MW$H$7$J$$(B
$BJ}K!$G<B8=$5$l$F$$$^$9!#$=$N$?$a!"#L#S#M$,%5%]!<%H$5$l$F$$$k%+!<%M%k$G$"$l$P!"(B
AKARI $B$r;H$&$3$H$,2DG=$G$9!#$D$^$j!">/$J$/$H$b(B
Red Hat Enterprise Linux (RHEL4(2.6.9)/RHEL5(2.6.18)/RHEL6(2.6.32))
Fedora (from Fedora Core 2(2.6.5) to Fedora 14(2.6.36))
Ubuntu (from Warty(2.6.8) to Maverick(2.6.35))
Debian (Sarge(2.6.8)/Etch(2.6.18)/Lenny(2.6.26)/Squeeze(2.6.32))
openSUSE (from 9.1(2.6.4) to 11.3(2.6.34))
$B$J$I$GMxMQ2DG=$G$9!#!J%+!<%M%k$,#L#S#M$r%5%]!<%H$7$F$$$J$$>l9g$O;H$($^$;$s!#(B
$B$^$?!"%G%#%9%H%j%S%e!<%?FH<+$N%Q%C%A$,E,MQ$5$l$F$$$k$3$H$K$h$j;H$($J$$>l9g$b(B
$B$"$k$3$H$r$4N;>5$/$@$5$$!#!K(B
$B!!(BAKARI $B$O#L#K#M$+$i%"%/%;%9$G$-$J$$4X?t$dJQ?t$K6/0z$K%"%/%;%9$9$k$?$a$K!"(B
$B%P%$%J%j%3!<%I$r%9%-%c%s$7$^$9!#$=$N$?$a!"F0:n$7$J$$#C#P#U%"!<%-%F%/%A%c$,(B
$B$"$k$+$H;W$$$^$9!#8=;~E@$G$O(B x86_32 $B$G$NF0:n$r3NG'$7$F$$$^$9$,!"(B x86_64 $B$d(B
IA64 $B$J$I$NB>$N4D6-$G$NF0:n$O3NG'$7$F$$$^$;$s!J$"$k$$$O3NG'$9$k$?$a$N4D6-$r(B
$B;}$C$F$$$^$;$s!K!#(B
$B!!$3$N$h$&$J<jK!$r:NMQ$9$k$K;j$C$?GX7J$K$D$$$F$O#87n$K%\%9%H%s$G3+:E$5$l$?(B
Linux Security Summit $B$N%i%$%H%K%s%0%H!<%/$G>R2p$7$^$7$?$,!";22C$7$F$$$J$$?M$O(B
$BA4A3CN$i$J$$$G$7$g$&$+$i$3$N%a!<%k$NKvHx$K=q$-$^$9!#(B
$B!!(BAKARI $B$O%+!<%M%kK\BN$KBP$9$k=$@5$rA4$/I,MW$H$7$J$$$?$a!"(B TOMOYO 1.8 $B$HHf$Y$F(B
$BF3F~$N$?$a$N?4M}E*>cJI$,Dc$/$J$C$F$$$^$9!#$^$?!"%M%C%H%o!<%/!JAw?.7OA`:n!K$N(B
$B@)8B$d%"%/%;%9%m%05!G=$J$I$b%5%]!<%H$5$l$F$*$j!"(B TOMOYO 2.3 $B$HHf$Y$F$h$jB?$/$N(B
$B5!G=$rMxMQ$9$k$3$H$,$G$-$^$9!#$=$7$F!"(B AKARI $B$O#L#S#M%b%8%e!<%k$G$O$"$j$^$9$,!"(B
TOMOYO 1.x $B$HF1MM$KB>$N#L#S#M%b%8%e!<%k$H$NJ;MQ$,2DG=$G$9!#(B AKARI $B$r;H$&$?$a$K(B
SELinux/Smack/TOMOYO/AppArmor $B$J$I$rL58z$K$9$kI,MW$O$"$j$^$;$s!#(B
$B!!%+!<%M%kK\BN$K<j$r2C$($J$$$G<B8=$G$-$kHO0O$G<BAu$7$F$$$k$?$a!"#L#S#M%U%C%/$,(B
$BDs6!$5$l$F$$$J$$$3$H$K$h$j(B AKARI $B$G$OMxMQ$G$-$J$$5!G=$b$"$j$^$9!#Nc$($P!"(B
$B%M%C%H%o!<%/!J<u?.7OA`:n!K$H%7%0%J%kAw?.$H%1%$%Q%S%j%F%#$KBP$9$k@)8B$K$O(B
$BBP1~$7$F$$$^$;$s!#$^$?!"%U%!%$%k$K4X$9$k%"%/%;%9@)8f$K$D$$$F$b%+!<%M%k$N(B
$B%P!<%8%g%s$*$h$S%+!<%M%k%3%s%U%#%0$K$h$j!"%A%'%C%/BP>]$H$J$k%Q!<%_%C%7%g%s$d(B
$B%Q%9L>$KBP$9$k:90[$,B8:_$7$F$$$^$9!#%"%/%;%***@O%D!<%k$H$7$F;H$&J,$K$O(B
$B5$$K$J$i$J$$$H;W$$$^$9$,!"%"%/%;%9@)8B%D!<%k$H$7$F;H$&$K$OIT==J,$JItJ,$,(B
$B$"$k$+$H;W$$$^$9!#(B
$B$3$N$h$&$J%b%8%e!<%k$r:n$k$3$H$K$J$C$?GX7J!'(B
$B!!:#G/$N#37n:"$@$C$?$H;W$$$^$9$,!"$"$k?M$+$i(B RHEL4/5 $B%f!<%68~$1$KC15!G=$J(B
$B!!%"%/%;%9@)8f%b%8%e!<%k$r:n$C$F$[$7$$$H$$$&AjCL$r<u$1$^$7$?!#$=$N:]!"(B
$B!!(BTOMOYO 1.x $B$N$h$&$K%+!<%M%kK\BN$rCV$-49$($kJ}K!$OMxMQ<T$K$H$C$F?4M}E*$J>cJI$,(B
$B!!9b$9$.$k$N$G!"#L#K#M$H$7$FDI2C2DG=$JJ}K!$G<B8=$7$F$[$7$$$HMj$^$l$^$7$?!#(B
$B!!#L#K#M$G$"$C$F$b(B RedHat $B$,%5%]!<%H$7$F$$$J$$#L#K#M$r%m!<%I$7$?;~E@$G(B RedHat
$B!!$K$h$k%5%]!<%H$r<u$1$i$l$J$/$J$k$N$G!"<B:]$K$O%+!<%M%kK\BN$rCV$-49$($k$N$H(B
$B!!Bg:9$J$$$H;d$O;W$&$N$G$9$,!"%(%s%I%f!<%6$O$=$&$O;W$o$J$$$h$&$G$9!#(B
$B!!$4B8$8$NDL$j!"%+!<%M%kK\BN$rCV$-49$($:$K%"%/%;%9@)8f%b%8%e!<%k$r;H$$$?$$>l9g(B
$B!!#L#S#M$r;H$&$7$+J}K!$,$"$j$^$;$s!#$7$+$7!"%+!<%M%k(B 2.6.24 $B$K$*$$$F!"(B
$B!!#L#S#M%b%8%e!<%k$rEPO?$9$k$?$a$N4X?t$G$"$k(B register_security() $B$*$h$S#L#S#M(B
$B!!%b%8%e!<%k$r8F$S=P$9$?$a$NJQ?t$G$"$k(B security_ops $B$K#L#K#M$+$i%"%/%;%9$9$k(B
$B!!$3$H$,$G$-$J$/$J$j$^$7$?!J(B http://lkml.org/lkml/2007/7/14/91 $B!K!#(B
$B!!%+!<%M%k(B 2.6.24 $B0J9_!"I=8~$-$K$O#L#S#M%b%8%e!<%k$r#L#K#M$H$7$F<BAu$9$k$3$H$O(B
$B!!IT2DG=$K$J$j$^$7$?$,!"H4$1F;$H$7$F(B /proc/kallsyms $B$+$i(B register_security() $B$N(B
$B!!%"%I%l%9$r3d$j=P$9$3$H$K$h$j#L#S#M%b%8%e!<%k$r#L#K#M$H$7$F<BAu$9$k$3$H$O(B
$B!!2DG=$G$7$?!#$7$+$7!"%+!<%M%k(B 2.6.35 $B$K$*$$$F(B register_security() $B<+?H$,(B
$B!!(Binitramfs/initrd $B$N3+;OA0$K>CLG$9$k$h$&$K$J$C$F$7$^$C$?$?$a!"$3$NH4$1F;$b(B
$B!!;H$($J$/$J$j$^$7$?!J(B http://lkml.org/lkml/2010/2/26/239 $B!K!#(B
$B!!$3$l$i$N;EMMJQ99$O(B RHEL4/5 $B8~$1$N%"%/%;%9@)8f%b%8%e!<%k$r:n$k>e$G$OLdBj$K$O(B
$B!!$J$j$^$;$s!#$7$+$7!"(B RHEL6 $B$d(B Ubuntu 10.10 $B8~$1$N%"%/%;%9@)8f%b%8%e!<%k$r(B
$B!!:n$k>e$G$OBgLdBj$G$9!#(B
$B!!$I$&$d$C$F$3$NLdBj$r2r7h$9$l$PNI$$$N$G$7$g$&!)C15!G=%"%/%;%9@)8f%b%8%e!<%k$r(B
$B!!#L#S#M%b%8%e!<%k$H$7$F<BAu$7$F%a%$%s%i%$%s$K%^!<%8$5$;!"$=$l$+$i(B
$B!!%G%#%9%H%j%S%e!<%?$K:NMQ$rF/$-$+$1$l$PNI$$$N$G$7$g$&$+!)(B
$B!!;DG0$J$,$i!"$3$NJ}K!$O$&$^$/$$$+$J$$$N$G$9!#(B
$B!!%+!<%M%k(B 2.6.36 $B$X8~$1$F(B Yama $B$H$$$&C15!G=#L#S#M%b%8%e!<%k$,Ds0F$5$l$^$7$?$,(B
$B!!%^!<%8$5$l$^$;$s$G$7$?!##L#S#M$OGSB>E*$G$"$k$f$(!"0lDL$j$N4pK\E*$J5!G=$r(B
$B!!%+%P!<$7$F$$$J$$#L#S#M%b%8%e!<%k$O%a%$%s%i%$%s$K$O:NMQ$7$J$$J}?K$@$+$i$G$9(B
$B!!!J(B http://lkml.org/lkml/2010/8/3/464 http://lkml.org/lkml/2010/8/5/147 $B!K!#(B
$B!!$D$^$j!"(B Yama $B$N$h$&$KC15!G=$J%"%/%;%9@)8f5!G=$rA_$-=8$a$?$@$1$N#L#S#M(B
$B!!%b%8%e!<%k$G$O:NMQ$5$l$J$$$N$G$9!J(B http://lkml.org/lkml/2010/8/2/188 $B!K!#(B
$B!!(Binitramfs/initrd $B3+;O8e$K#L#S#M%b%8%e!<%k$r%m!<%I$9$k$3$H$,$G$-$J$$$H$$$&(B
$B!!@)Ls$H!"C15!G=#L#S#M%b%8%e!<%k$O%a%$%s%i%$%s$K$O:NMQ$5$l$J$$$H$$$&@)Ls!"(B
$B!!%G%#%9%H%j%S%e!<%?$O%a%$%s%i%$%s$K:NMQ$5$l$F$$$J$$%3!<%I$r:NMQ$7$?$,$i$J$$(B
$B!!$H$$$&798~$,=E$J$C$?7k2L!"C15!G=#L#S#M%b%8%e!<%k$rF3F~$7$?$$%f!<%6$KBP$7$F(B
$B!!!V%+!<%M%k$r:F%3%s%Q%$%k$7$FCV$-49$($k$+!"$5$b$J$/$P$=$N%b%8%e!<%k$NF3F~$r(B
$B!!D|$a$k$+!W$NFs<TBr0l$rGw$i$6$k$r$($J$$$H$$$&>u67$,@8$8$F$$$k$o$1$G$9!#(B
$B!!!J(B Yama $B$ONc30$G!"(B Ubuntu 10.10 $B$N%+!<%M%k$K$OAH$_9~$^$l$F$$$^$9!#$7$+$b!"(B
$B!!(BUbuntu 10.10 $B$N%+!<%M%k$KAH$_9~$^$l$F$$$k(B Yama $B$O#L#S#M%U%C%/$G$O$J$/FH<+(B
$B!!%U%C%/$rMxMQ$7$F$$$k$?$a!"(B AppArmor $B$d(B TOMOYO $B$J$IB>$N#L#S#M%b%8%e!<%k$H(B
$B!!F1;~$K;HMQ$9$k$3$H$,$G$-$^$9!#!K(B
$B!!!V%a%$%s%i%$%s$KF~$C$F$$$J$$#L#S#M%b%8%e!<%k$K$O#L#S#M$r;H$o$;$J$$!W<BAu$K(B
$B!!$7$F$*$-$J$,$i!"!V%a%$%s%i%$%s$KF~$l$k$N$KCM$7$J$$#L#S#M%b%8%e!<%k$O%^!<%8(B
$B!!$7$J$$!W$H5,@)$7$F$$$k$o$1$G$9!#!V%a%$%s%i%$%s$KF~$C$F$$$k#L#K#M$rMxMQ$9$k(B
$B!!<jCJ$ODs6!$9$k$,!"%a%$%s%i%$%s$KF~$C$F$$$J$$#L#K#M$rMxMQ$9$k<jCJ$ODs6!(B
$B!!$7$J$$!W$H8@$C$F$$$k$N$KEy$7$$$N$G$9!#$3$l$G$O#L#K#M$d#L#S#M%b%8%e!<%k$r(B
$B!!3+H/!&MxMQ$9$k<+M3$rGmC%$7$F$7$^$&$3$H$K$J$j$^$9!#(B
$B!!%(%s%I%f!<%6$N<+***@UG$$G%a%$%s%i%$%s$KF~$C$F$$$J$$#L#K#M$d#L#S#M%b%8%e!<%k$r(B
$B!!MxMQ$9$k<+M3$OG'$a$i$l$k$Y$-$@$H;d$O;W$$$^$9!#$=$l8N!";d$O#L#K#M$+$i#L#S#M$K(B
$B!!6/0z$K%"%/%;%9$9$k<jK!$r3NN)$7!"#L#K#M%Y!<%9$N#L#S#M%b%8%e!<%k$H$7$F8x3+$7$?(B
$B!!$o$1$G$9!#:#$^$G2?=h$K$bL5$+$C$?$b$N$,!"$3$3$***@8$7$^$7$?!#(B
$B!!(BAKARI $B$N%=!<%9%3!<%I$r%F%s%W%l!<%H$H$7$F;H$&$3$H$K$h$jG$0U$NC15!G=#L#S#M(B
$B!!%b%8%e!<%k$r3+H/$9$k$3$H$,$G$-$k$O$:$G$9!#(B Linux Security Summit $B$G$O(B
$B!!(BTOMOYO 2.3 $B$rM-8z$K$7$?$^$^(B Yama $B$bM-8z$K$9$k$H$$$&%G%b$r8+$;$^$7$?(B
$B!!!J(B $B!K!#$^$?!"FCDj$N%f!<%6#I#D(B
$B!!$K$h$k%=%1%C%HA`:n$rA4$F<WCG$9$k$H$$$&#L#S#M%b%8%e!<%k$b$"$j$^$9(B
$B!!!J(B http://kerneltrap.org/mailarchive/linux-netdev/2010/8/26/6283942 $B!K!#(B